Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/584f1870-616f-39d0-b540-7b038721d9d1.roa
File:                     584f1870-616f-39d0-b540-7b038721d9d1.roa (raw, json)
Hash identifier:          HB/64pfx946VQNb9mNAO8LjduCk1yr7DzmYX6FSsT00=
Subject key identifier:   DE:0B:37:0B:36:45:BF:03:7F:49:59:4A:55:CC:45:F5:F3:08:58:97
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F43285849FE0FE251B830EA09AEFBD480
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/584f1870-616f-39d0-b540-7b038721d9d1.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     62787
IP address blocks:        2602:f6d0:40::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:e2:51:b8:30:ea:09:ae:fb:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=fa61f9b1-408a-4371-8657-e7ad033cd9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:87:17:a7:c6:0d:40:cf:2f:94:91:93:bb:c6:
                    9e:6e:ee:1d:2a:2e:2a:da:0f:c5:28:ce:dc:e0:a5:
                    e9:57:1b:96:bb:db:a1:c2:84:85:d7:e8:18:da:11:
                    97:d3:46:c9:20:7f:58:e0:5e:60:66:58:72:a6:f0:
                    47:97:1a:3f:8a:53:73:ba:c1:61:01:1f:9e:27:ae:
                    c4:96:91:7d:ab:d7:66:5e:fb:95:27:a2:e1:bc:df:
                    21:41:6a:12:4c:f2:3d:23:57:c2:46:14:bc:55:e5:
                    55:9c:3e:50:a2:c3:49:5b:c5:98:4d:c1:4b:08:7a:
                    75:d7:99:f7:1d:05:50:30:1a:b5:78:7f:2b:45:28:
                    be:12:f0:c7:c9:9d:3d:bf:9f:12:0a:cd:b3:98:09:
                    72:02:cd:b4:d1:96:d0:83:2e:7d:51:88:f5:0e:e1:
                    45:88:e8:3f:e0:8b:a7:54:93:5d:d5:eb:c3:88:0a:
                    0c:8d:62:e6:4e:75:42:18:2b:1c:59:14:5f:19:cf:
                    dd:2d:d4:45:4c:26:af:ad:88:1b:b3:63:3f:ca:2f:
                    4f:05:12:b6:02:4e:dc:7b:16:a7:44:bb:2c:71:af:
                    5a:17:94:d3:27:f2:b6:d8:07:65:e1:98:d1:6e:4c:
                    06:a6:61:8a:4c:22:0b:4d:5c:24:41:01:0f:4f:33:
                    72:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0B:37:0B:36:45:BF:03:7F:49:59:4A:55:CC:45:F5:F3:08:58:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/584f1870-616f-39d0-b540-7b038721d9d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:40::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a0:da:3c:92:f7:d8:9f:9a:62:6a:cd:12:62:0f:94:69:64:
         1e:f7:97:82:f5:fa:b5:95:f6:f6:62:8c:78:d6:b4:4f:22:2e:
         eb:dd:64:5b:24:e4:5a:5e:4a:86:e8:75:25:93:07:e2:af:86:
         4a:0a:0d:7e:45:82:ce:64:c5:ff:9e:eb:54:e1:36:87:fe:8c:
         d3:aa:e4:75:75:80:17:bc:61:7e:44:b7:05:ac:ba:99:31:cb:
         51:af:c5:6c:70:d6:25:4d:79:b8:c3:5a:23:c6:9a:dc:e2:cc:
         fc:cf:e2:69:3d:f2:e1:02:04:fd:88:e9:0d:16:6d:57:1b:2e:
         a5:6c:39:d5:ac:be:a6:d3:f8:ae:63:ca:46:cf:3c:82:27:c1:
         f2:d4:3f:bc:c2:1e:7c:d6:9b:a4:38:8f:68:e4:25:be:ea:df:
         64:57:40:9d:f4:9f:82:8e:dc:39:01:7f:76:72:4d:d1:01:7f:
         b7:b5:64:e2:a0:c6:5c:cd:74:64:b2:3c:72:69:fd:3e:fa:33:
         af:81:71:a8:6f:ef:fb:29:b8:66:fb:9b:e7:6f:e1:d8:5d:ef:
         1c:d6:c9:17:6c:ed:e9:f7:3c:12:a1:ca:1a:20:94:11:b8:dd:
         94:72:ea:cb:f3:99:8a:64:3a:90:0c:81:69:43:00:1f:47:dd:
         57:45:9f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:05:01 2025 by rpki-client